Privacy Policy

1. Who we are

Luma Digital Marketing (“Luma”, “we”, “us”, “our”) is a digital marketing agency based in Durbanville, South Africa, providing services including web design, search engine optimisation (SEO), paid advertising, social media management, Google Analytics setup, and email marketing.

We are committed to protecting your personal information. This policy explains what data we collect, why we collect it, and how we handle it — in accordance with the Protection of Personal Information Act (POPIA), Act 4 of 2013, and, where applicable, the EU General Data Protection Regulation (GDPR).

Responsible Party / Data Controller: Lara Husselmann, Luma Digital Marketing.
Contact: info@lumadigital.co.za

2. Information we collect

We collect personal information in the following ways:

a) Information you provide directly

• Contact form: first name, surname, email address, and your message when you fill in a form on our website.
• Newsletter sign-up: email address if you opt in to receive our newsletter.
• Direct email: any information you include when you contact us by email.

b) Information collected automatically

• Analytics data: pages visited, time on site, traffic source, device type, browser, and approximate location (country/city). This is collected via Google Analytics 4 only after you have given your consent through our cookie banner.
• Advertising data: if you consent to marketing cookies, the Meta Pixel may collect information about your visit to help us measure the effectiveness of our advertising.
• Technical data: IP address, HTTP request headers, and similar information that our hosting provider (Vercel) and CDN provider (Cloudflare) collect as part of delivering the website to you. This data is subject to their respective privacy policies.

3. How we use your information

• To respond to your enquiry — when you fill in our contact form, we use your name and email address to reply to you.
• To send our newsletter — only if you have explicitly opted in. You can unsubscribe at any time using the link in every email.
• To improve our website — anonymised analytics data (where consent has been given) helps us understand how visitors use the site so we can make it more useful.
• To measure advertising performance — if you consent to marketing cookies, we use aggregated data to understand whether our paid advertising campaigns are reaching the right audience.
• To comply with legal obligations — we may process your data where required to do so by law.

4. Legal basis for processing

Under POPIA (section 11) and the GDPR (Article 6), we rely on the following lawful grounds:

• Consent — for analytics cookies, marketing cookies, and newsletter communications. You can withdraw consent at any time.
• Legitimate interests — to respond to enquiries you initiate via our contact form. We have a legitimate interest in communicating with people who contact us.
• Legal obligation — where processing is required by applicable law.

5. How long we keep your data

• Contact form enquiries: we keep email correspondence for up to 3 years, after which it is deleted.
• Newsletter subscribers: we retain your email address for as long as you remain subscribed. On unsubscribe, your data is removed from our mailing list within 30 days.
• Analytics data: Google Analytics retains data for 14 months by default. Aggregated, anonymised reports may be kept indefinitely.

6. Third parties we share data with

We do not sell your personal information. We share data only with trusted third-party service providers, and only to the extent necessary to operate our services:

Where data is transferred outside South Africa, we take steps to ensure adequate protection consistent with POPIA section 72 requirements.

7. Your rights

Under POPIA and, where applicable, the GDPR, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct any inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to legal retention requirements.
• Objection — object to the processing of your information where we rely on legitimate interests.
• Restriction — ask us to limit how we process your information in certain circumstances.
• Portability — receive a copy of the information you provided to us in a structured, machine-readable format (GDPR).
• Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at info@lumadigital.co.za. We will respond within 30 days. If you are based in South Africa and believe your rights have been violated, you may lodge a complaint with the Information Regulator of South Africa. EU residents may also contact their local supervisory authority.

8. Cookies

We use cookies and similar technologies on our website. Our cookie banner allows you to choose which categories of cookies you accept:

• Strictly necessary — essential for the website to function (e.g. your cookie preference). Cannot be disabled.
• Analytics — help us understand how visitors use our site (Google Analytics 4). Only set with your consent.
• Marketing — used by the Meta Pixel to help measure advertising effectiveness. Only set with your consent.

You can change your cookie preferences at any time by clicking the “Cookie settings” link in the footer.

9. Children's privacy

Our website is not directed at children under the age of 18 and we do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date at the top of this page. We encourage you to review the policy periodically. Continued use of our website after changes are posted constitutes your acceptance of those changes.

11. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact our Information Officer: